0xc130d

Penetration tester, red-team enjoyer, trying to automate myself out of a job ;)

[Brandon Falk @gamozolabs]

My kinda hot take on the Mythos stuff is really that there is so little money in offensive research that it's still not really that hard to find bugs. These AI companies are operating with budgets that make the entire offensive research of all big tech combined look like a joke

[0xc130d @0xc130d]

@0xTriboulet @austinbuilds Lucky you, its used all over the place in certain large companies

[0xc130d @0xc130d]

@PortSwigger Can't wait to watch this post age like milk

[0xc130d @0xc130d]

Ive been shouting this from the rooftops for years, time will only prove me more right

[LeftHandedOctopus @AggieCapitalist]

"Recently, senior executives at Salesforce have admitted, both internally and publicly, that they massively overestimated AI’s capabilities. They have found that AI simply can’t cope with the complex nature of customer service and totally fails at nuanced issues, escalations, and

[PortSwigger @PortSwigger]

The Fragile Lock: Novel Bypasses For SAML Authentication by @zakfedotkin of @PortSwiggerRes

https://t.co/3B51vPlfPB

[MalDev Academy @MalDevAcademy]

ElectronVulnScanner is a tool designed to detect Electron applications vulnerable to ASAR tampering. It automatically enumerates your file system and reports identified Electron apps and their corresponding ASAR files.

https://t.co/NUhTavrmbt

[The North Korean Computer Emergency Response Team @dprkcert]

Do you ever just look at a login panel and feel the 0day?

[The Serfs (youtube.com/theserftimes) @theserfstv]

Massive canary in the coalmine moment

[0xc130d @0xc130d]

@SwiftOnSecurity Chat, is this based?

[0xc130d @0xc130d]

@_RastaMouse Yeah they should only research unbiased sources like American news outlets!

[0xc130d @0xc130d]

@Frichette_n I just love watching all the lines of output go brrr down my screen

[0xc130d @0xc130d]

I'm here for the next hour to present and will then probably wander the con a bit

[0xc130d @0xc130d]

If you are attending SECTOR in Toronto you can find me tomorrow in the Arsenal hall repping CloudPrivs. Come say hi!

[vx-underground @vxunderground]

> go to doctors office
> nurse comes in
> logs into room PC
> talks
> leaves room
> doesn't lock PC

[0xc130d @0xc130d]

@_RastaMouse Yup `aws configure` sets creds in plaintext to ~/.aws/credentials. This file can also be modified for assume role and other profile information

[0xc130d @0xc130d]

What actually is the point of maldev in Rust? I love the language but throwing unsafes all over the place seems pretty counter to it's purpose

[0xc130d @0xc130d]

@an0n_r0 @EricaZelic @NotMedic https://t.co/SY2iNfC9Ej

[0xc130d @0xc130d]

Oh hold on my signal to noise ratios is faltering, #aws #dllhijack #0day

[0xc130d @0xc130d]

Why doesn't any talk about how fucking cool Ireland is? I'm here for a couple days on vacation and I should've booked a week

[low yield lucy @picotop]

ok so I clicked a phishing email.

and now I’m in trouble for what? being too trusting? too unconditionally loving? too open to the universe’s surprises?